Senior SOC Lead - Remote Incident Response Expert

ECS; Virginia; Remote; USD 135,000 - 150,000; Full time

Job summary

ECS Federal LLC is seeking a Senior SOC Analyst (SOC Lead) to work remotely in a mature 24x7 SOC. You will help ingest, correlate, and analyze IoCs, lead incident escalations, and develop processes, SOPs, playbooks to improve detection and response.

The role requires leadership, mentoring, and strong communication with executives and SOC teams, with experience using SIEM tools (QRadar, Splunk) and EDR (CrowdStrike). Salary range is $135k-$150k with opportunity for growth.

Qualifications

• 5+ years in cybersecurity operations & incident response, with leadership experience
• Ability to interpret complex topics and present to executives/SOC
• Deep knowledge of SIEM/EDR technologies and vulnerability management
• Experience mentoring junior analysts and leading investigations
• Certifications such as CISSP, CISM, GIAC, CEH preferred

Responsibilities

• Monitor and manage threats, disseminate information, and handle incident escalations from SOC
• Track and document security incidents; maintain incident tickets and SOPs
• Continuously monitor SIEM/on-premises/cloud for threats and intrusions
• Coordinate with SOC staff for investigations and IoC remediation
• Lead root-cause analyses and post-mortems to drive improvements
• Develop runbooks, SOPs, and playbooks to support incident response
• Provide training and mentorship to SOC analysts

Skills

SOC leadership

Incident response

Analytical skills

Threat monitoring

Communication

Mentorship

SLA management

Team collaboration

Calm under pressure

Automation & playbooks

Education

Bachelor's degree in cybersecurity or related field

Tools

QRadar

Splunk

CrowdStrike

Tenable

Job description

ECS Federal LLC is seeking a Senior SOC Analyst (SOC Lead) to work remotely in a mature 24x7 SOC. You will help ingest, correlate, and analyze IoCs, lead incident escalations, and develop processes, SOPs, playbooks to improve detection and response.

The role requires leadership, mentoring, and strong communication with executives and SOC teams, with experience using SIEM tools (QRadar, Splunk) and EDR (CrowdStrike). Salary range is $135k-$150k with opportunity for growth.